Re: Reporting missing package during install

2013-12-18 Thread Andrei POPESCU
On Mi, 18 dec 13, 13:11:30, Tom H wrote: > > At home, people can run "sudo bash" (or more appropriately, "sudo -s" > or "sudo -i") but we can't do that at my current job or other at my > previous jobs. Is this requirement for logging purposes? Kind regards, Andrei -- http://wiki.debian.org/FAQs

Re: Reporting missing package during install

2013-12-18 Thread Tom H
On Fri, Dec 13, 2013 at 4:50 PM, Gian Uberto Lauri wrote: > Tom H writes: >> In the corporate environments where I work, we are about 70 sysadmins >> in my location and about half as much in another. We all sudo to root >> on our more or less 11,000 systems. So by your reckoning we have 100 >> c

Re: coloured prompt for root (was ... Re: Reporting missing package during install)

2013-12-14 Thread Chris Bannister
On Wed, Dec 11, 2013 at 02:13:18PM +0100, Gian Uberto Lauri wrote: > Chris Bannister writes: > > > This is in a tty, so don't know what will happen in an xterm or other > > virtual terminal. > > The virtual terminals usually honour ANSI escape sequences. For sure > xterm, the rxvt family and th

Re: Reporting missing package during install

2013-12-13 Thread Gian Uberto Lauri
Tom H writes: > In the corporate environments where I work, we are about 70 sysadmins > in my location and about half as much in another. We all sudo to root > on our more or less 11,000 systems. So by your reckoning we have 100 > critical accounts but that's not how our internal and external

Re: Reporting missing package during install

2013-12-13 Thread Tom H
On Tue, Dec 10, 2013 at 7:59 AM, Gian Uberto Lauri wrote: > Tom H writes: >> On Mon, Dec 9, 2013 at 8:09 AM, Gian Uberto Lauri wrote: >>> If some users needed to have the root power for a small set of >>> operation, then sudo would give them that extact power, no more no >>> less. >>> >>> What

Re: Reporting missing package during install

2013-12-12 Thread Ralf Mardorf
On Thu, 2013-12-12 at 22:14 +0900, Osamu Aoki wrote: > 'sudo sh' is as easy on finger (no shift) and do not feel as bad. Doesn't it have any side-effects? I wonder about the prompt of an Arch Linux install. [rocketmouse@archlinux ~]$ ls -l /bin/sh lrwxrwxrwx 1 root root 4 Aug 25 14:06 /bin/sh

Re: Reporting missing package during install

2013-12-12 Thread Reco
On Thu, 12 Dec 2013 22:14:50 +0900 Osamu Aoki wrote: > On Sun, Dec 08, 2013 at 09:09:53PM -0500, Neal Murphy wrote: > > On Sunday, December 08, 2013 07:27:41 PM Andrei POPESCU wrote: > > > On Du, 08 dec 13, 19:14:49, Neal Murphy wrote: > > > > For me, I usually set up 'sudo su' > > > > > > sudo

Re: Reporting missing package during install

2013-12-12 Thread Osamu Aoki
On Sun, Dec 08, 2013 at 09:09:53PM -0500, Neal Murphy wrote: > On Sunday, December 08, 2013 07:27:41 PM Andrei POPESCU wrote: > > On Du, 08 dec 13, 19:14:49, Neal Murphy wrote: > > > For me, I usually set up 'sudo su' > > > > sudo has the '-s' and '-i' switches, why mix with 'su'? > > > > Kind re

coloured prompt for root (was ... Re: Reporting missing package during install)

2013-12-11 Thread Gian Uberto Lauri
Chris Bannister writes: > This is in a tty, so don't know what will happen in an xterm or other > virtual terminal. The virtual terminals usually honour ANSI escape sequences. For sure xterm, the rxvt family and the libvte-based ones do. But with virtual terminals you can do something like hav

coloured prompt for root (was ... Re: Reporting missing package during install)

2013-12-11 Thread Chris Bannister
On Tue, Dec 10, 2013 at 11:11:34PM +, Lisi Reisz wrote: > On Tuesday 10 December 2013 06:39:17 Tom H wrote: > > You can't trust yourself with sudo but you can trust yourself with > > su or login root access... > > I have to make a conscious effort to become root. This reduces the > risk that

Re: Reporting missing package during install

2013-12-10 Thread Lisi Reisz
On Tuesday 10 December 2013 06:39:17 Tom H wrote: > You can't trust yourself with sudo but you can trust yourself with > su or login root access... I have to make a conscious effort to become root. This reduces the risk that I will accidentally do something extra foolish. I do not have root lo

Re: Reporting missing package during install

2013-12-10 Thread Gian Uberto Lauri
Andrei POPESCU writes: > On Lu, 09 dec 13, 18:13:07, Gian Uberto Lauri wrote: > > Andrei POPESCU writes: > > > On Lu, 09 dec 13, 10:56:22, Gian Uberto Lauri wrote: > > > > > > > > sudo makes it a bit worse. Any user account opens the door to the root > > > > account. Therefore you have t

Re: Reporting missing package during install

2013-12-10 Thread Gian Uberto Lauri
Tom H writes: > On Mon, Dec 9, 2013 at 8:09 AM, Gian Uberto Lauri wrote: > > If some users needed to have the root power for a small set of > > operation, then sudo would give them that extact power, no more no > > less. > > > > What are the benefits of The "Macintosh/Ubuntu" use of sudo? I

Re: Reporting missing package during install

2013-12-09 Thread Gian Uberto Lauri
Ralf Mardorf writes: > On Mon, 2013-12-09 at 18:13 +0100, Gian Uberto Lauri wrote: > > Think about this scenario: someone devises a clever way to slip a > > Trojan in a user account. > > Than the trojan has got user privileges only. If it's a key logger it > can read what password you type f

Re: Reporting missing package during install

2013-12-09 Thread Tom H
On Mon, Dec 9, 2013 at 10:38 PM, Lisi Reisz wrote: > On Monday 09 December 2013 18:55:33 Tom H wrote: Yes, I don't like it and always want a root password. As you say, this is and has been contentious. >> >> Having a password for root and having sudo installed and set up >> isn't an

Re: Reporting missing package during install

2013-12-09 Thread Andrei POPESCU
On Lu, 09 dec 13, 18:13:07, Gian Uberto Lauri wrote: > Andrei POPESCU writes: > > On Lu, 09 dec 13, 10:56:22, Gian Uberto Lauri wrote: > > > > > > sudo makes it a bit worse. Any user account opens the door to the root > > > account. Therefore you have to guard a larger perimeter. > > > > C

Re: Reporting missing package during install

2013-12-09 Thread Lisi Reisz
On Monday 09 December 2013 18:55:33 Tom H wrote: > >> Yes, I don't like it and always want a root password. As you > >> say, this is and has been contentious. > > Having a password for root and having sudo installed and set up > isn't an either/or proposition. We have already agreed surely that ho

Re: Reporting missing package during install

2013-12-09 Thread Tom H
On Mon, Dec 9, 2013 at 9:56 AM, Gian Uberto Lauri wrote: > Andrei POPESCU writes: >> On Lu, 09 dec 13, 09:09:11, Gian Uberto Lauri wrote: >>> What are the benefits of The "Macintosh/Ubuntu" use of sudo? Improved >>> security? Are you kidding? Whatever the user I compromise I have root >>> access

Re: Reporting missing package during install

2013-12-09 Thread Tom H
On Mon, Dec 9, 2013 at 8:09 AM, Gian Uberto Lauri wrote: > Lisi Reisz writes: >> On Saturday 07 December 2013 21:36:30 Bob Proulx wrote: >>> If you look back in the mailing list archives you will find a >>> recent discussion where there were some people who didn't like >>> sudo. I was shocked by

Re: Reporting missing package during install

2013-12-09 Thread Ralf Mardorf
On Mon, 2013-12-09 at 18:13 +0100, Gian Uberto Lauri wrote: > Think about this scenario: someone devises a clever way to slip a > Trojan in a user account. Than the trojan has got user privileges only. If it's a key logger it can read what password you type for sudo, but also what you type for su.

Re: Reporting missing package during install

2013-12-09 Thread Gian Uberto Lauri
Andrei POPESCU writes: > On Lu, 09 dec 13, 10:56:22, Gian Uberto Lauri wrote: > > > > sudo makes it a bit worse. Any user account opens the door to the root > > account. Therefore you have to guard a larger perimeter. > > Could you please elaborate on this? In Debian's default configuratio

Re: Reporting missing package during install

2013-12-09 Thread Andrei POPESCU
On Lu, 09 dec 13, 10:56:22, Gian Uberto Lauri wrote: > > sudo makes it a bit worse. Any user account opens the door to the root > account. Therefore you have to guard a larger perimeter. Could you please elaborate on this? In Debian's default configuration this is simply not true. > > > Furth

Re: Reporting missing package during install

2013-12-09 Thread Nemeth Gyorgy
2013-12-09 14:43 keltezéssel, Gian Uberto Lauri írta: > > This is not true. Only the user account which is in /etc/sudoers can use > > the sudo command. In Debian default it acutally means the members of the > > sudo group. > > AFAIK it means "those listed in /etc/sudoers", according to the >

Re: Reporting missing package during install

2013-12-09 Thread Gian Uberto Lauri
John Hasler writes: > Gian Uberto Lauri writes: > > sudo makes it a bit worse. Any user account opens the door to the root > > account. Therefore you have to guard a larger perimeter. > > Ubuntu grants sudo privileges only to the first user account created. > As there is no root account, the

Re: Reporting missing package during install

2013-12-09 Thread Gian Uberto Lauri
Nemeth Gyorgy writes: > 2013-12-09 10:56 keltezéssel, Gian Uberto Lauri írta: > > sudo makes it a bit worse. Any user account opens the door to the root > > account. Therefore you have to guard a larger perimeter. > > This is not true. Only the user account which is in /etc/sudoers can use >

Re: Reporting missing package during install

2013-12-09 Thread John Hasler
Gian Uberto Lauri writes: > sudo makes it a bit worse. Any user account opens the door to the root > account. Therefore you have to guard a larger perimeter. Ubuntu grants sudo privileges only to the first user account created. As there is no root account, there is just one account with root privi

Re: Reporting missing package during install

2013-12-09 Thread Nemeth Gyorgy
2013-12-09 10:56 keltezéssel, Gian Uberto Lauri írta: > sudo makes it a bit worse. Any user account opens the door to the root > account. Therefore you have to guard a larger perimeter. This is not true. Only the user account which is in /etc/sudoers can use the sudo command. In Debian default it

Re: Reporting missing package during install

2013-12-09 Thread Gian Uberto Lauri
Andrei POPESCU writes: > On Lu, 09 dec 13, 09:09:11, Gian Uberto Lauri wrote: > > > > What are the benefits of The "Macintosh/Ubuntu" use of sudo? Improved > > security? Are you kidding? Whatever the user I compromise I have root > > access, just type "sudo bash". > > sudo doesn't make th

Re: Reporting missing package during install

2013-12-09 Thread Andrei POPESCU
On Lu, 09 dec 13, 09:09:11, Gian Uberto Lauri wrote: > > What are the benefits of The "Macintosh/Ubuntu" use of sudo? Improved > security? Are you kidding? Whatever the user I compromise I have root > access, just type "sudo bash". sudo doesn't make this worse, just slightly easier. Compromising

Re: Reporting missing package during install

2013-12-09 Thread Gian Uberto Lauri
Lisi Reisz writes: > On Saturday 07 December 2013 21:36:30 Bob Proulx wrote: > > If you look back in the mailing list archives you will find a > > recent discussion where there were some people who didn't like > > sudo.  I was shocked by that because I always thought that most > > people liked

Re: Reporting missing package during install

2013-12-08 Thread Neal Murphy
On Sunday, December 08, 2013 07:27:41 PM Andrei POPESCU wrote: > On Du, 08 dec 13, 19:14:49, Neal Murphy wrote: > > For me, I usually set up 'sudo su' > > sudo has the '-s' and '-i' switches, why mix with 'su'? > > Kind regards, > Andrei 'sudo su' rolls off the fingers easier. -- To UNSUBSCRI

Re: Reporting missing package during install

2013-12-08 Thread Andrei POPESCU
On Du, 08 dec 13, 19:14:49, Neal Murphy wrote: > > For me, I usually set up 'sudo su' sudo has the '-s' and '-i' switches, why mix with 'su'? Kind regards, Andrei -- http://wiki.debian.org/FAQsFromDebianUser Offtopic discussions among Debian users and developers: http://lists.alioth.debian.org

Re: Reporting missing package during install

2013-12-08 Thread Neal Murphy
On Sunday, December 08, 2013 07:01:50 PM Lisi Reisz wrote: > On Saturday 07 December 2013 21:36:30 Bob Proulx wrote: > > If you look back in the mailing list archives you will find a > > recent discussion where there were some people who didn't like > > sudo. I was shocked by that because I always

Re: Reporting missing package during install

2013-12-08 Thread Lisi Reisz
On Saturday 07 December 2013 21:36:30 Bob Proulx wrote: > If you look back in the mailing list archives you will find a > recent discussion where there were some people who didn't like > sudo.  I was shocked by that because I always thought that most > people liked it. Yes, I don't like it and alw

Re: Reporting missing package during install

2013-12-07 Thread Bob Proulx
Andrei POPESCU wrote: > Troy Engel wrote: > > Hi all - which package do you report against for a missing package during > > install? debian-installer? user-setup? The jessie .iso 2013-12-07 netinst > > using only groups "SSH Server" and "Standard Tools" failed to install sudo. > > The sudo group is

Re: Reporting missing package during install

2013-12-07 Thread Andrei POPESCU
On Sb, 07 dec 13, 11:17:58, Troy Engel wrote: > Hi all - which package do you report against for a missing package during > install? debian-installer? user-setup? The jessie .iso 2013-12-07 netinst > using only groups "SSH Server" and "Standard Tools" failed to install sudo. > The sudo group is in